Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
File:                     hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json)
Hash identifier:          qKBhNzwSZX37NcU8lsiA4S26tsXiDGmBs1vlLd7VwXI=
Subject key identifier:   B0:C9:41:C0:65:64:12:F7:6A:6F:18:1C:A6:9C:BD:42:5C:26:20:69
Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
Certificate issuer:       /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
Manifest number:          C4
Signing time:             Wed 23 Sep 2026 06:38:14 +0000
Manifest this update:     Wed 23 Sep 2026 06:38:13 +0000
Manifest next update:     Wed 30 Sep 2026 06:38:13 +0000
Files and hashes:         1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: 3GUTSeHFuwH26LtKTEytbrbsXQQz2T7Tw0MilnJQdBw=)
                          2: 33C3BDD69AA111F0944EF628C4F9AE02.roa (hash: pV6RrpL0HFiSkSQ3Egen1lL8OO4gLgRAAJv9sHZbodQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
                          rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
        Validity
            Not Before: Sep 23 06:38:13 2026 GMT
            Not After : Sep 30 06:38:13 2026 GMT
        Subject: CN=6ab373d5-487e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:58:71:7a:b9:63:97:d0:2b:76:fb:f0:c7:
                    a0:45:a0:90:3e:88:0d:9d:89:5f:ed:bf:ab:c1:60:
                    ab:97:08:b6:4f:ca:f9:a8:35:89:7e:0c:ef:aa:48:
                    70:fa:ce:86:95:79:3a:eb:28:26:b4:b4:3c:ff:7d:
                    47:bc:01:63:a1:58:51:ec:a9:f6:5b:59:5b:e5:69:
                    0c:9b:89:78:3a:30:0b:ef:22:8d:ad:98:65:fa:0e:
                    1e:91:53:e8:4a:17:3a:16:54:2d:81:58:ad:fa:d7:
                    49:35:f0:f8:7e:ff:fd:d0:47:d7:15:f8:08:5a:37:
                    28:e7:e3:69:4b:2c:61:38:d9:1f:7f:23:cc:4d:7f:
                    27:92:32:13:f8:c6:5b:35:20:4a:dd:63:01:ac:df:
                    94:ba:dd:5b:c9:d2:30:37:fb:49:0f:8a:87:d0:e6:
                    c5:7f:7e:d2:c4:3e:31:ff:5a:bc:ca:43:66:cf:15:
                    8b:92:f7:21:a5:5c:96:35:4e:ed:a3:9e:7d:dc:ab:
                    00:1d:ce:a9:5a:8d:8e:83:ba:d5:a5:fa:0f:73:5e:
                    cb:85:c6:02:d4:58:7a:36:e1:dd:f5:64:51:ac:80:
                    6d:75:39:8b:d8:e0:89:cb:93:cc:a1:12:34:80:25:
                    f5:bc:af:79:35:11:f6:7c:f6:c4:32:1c:a0:68:e8:
                    b1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C9:41:C0:65:64:12:F7:6A:6F:18:1C:A6:9C:BD:42:5C:26:20:69
            X509v3 Authority Key Identifier:
                keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f4:74:79:58:51:90:97:70:52:a6:b8:d9:d5:45:30:b2:65:
         57:86:51:50:b0:aa:b2:4a:38:2b:5e:14:50:bb:c5:b7:f7:87:
         91:91:de:e6:61:eb:ff:19:e3:c8:e8:97:c2:9b:8b:e3:e1:4e:
         90:f9:70:42:aa:ee:68:a9:f0:f9:64:bc:73:c0:69:a6:6f:35:
         a3:99:88:58:c0:66:0d:e6:ad:11:d0:e7:a2:9f:e0:89:f4:6d:
         87:97:3b:fd:ad:8d:9a:76:a1:dc:63:71:c3:23:96:30:ab:da:
         bb:4a:2a:6f:ec:3b:23:be:3c:f9:dc:cb:00:f4:75:80:2f:aa:
         27:ab:66:a6:d9:d9:90:ef:6c:41:98:e1:b0:18:41:c5:e2:f4:
         8f:25:54:34:9f:87:e5:06:9a:9f:c5:98:4f:ca:e9:b5:f9:06:
         ca:8f:91:ab:32:ec:a5:e6:31:17:dd:64:08:9e:fd:f7:71:59:
         39:4d:7a:d4:e2:6c:37:eb:2c:4b:5e:89:70:7b:20:2f:07:75:
         cd:b9:ed:1a:45:13:4c:d4:b4:bc:16:85:65:d2:ad:cb:1a:61:
         47:0a:ec:d1:94:8f:61:76:65:6a:42:e5:7a:85:6a:78:78:58:
         f0:12:31:20:fc:06:68:58:3d:0c:af:3b:b9:78:fe:3e:97:4f:
         77:d6:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:07:31 2026 by rpki-client